$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/A1D479B878D411EAA8C57711C4F9AE02.roa File: A1D479B878D411EAA8C57711C4F9AE02.roa (raw, json) Hash identifier: obRBQ6LEWosfS1i2NAWPUNb1MMXwUPUFHNc2IZBZzak= Subject key identifier: 98:7D:C1:26:D2:5D:1D:BA:54:4C:1D:37:C6:32:54:E8:48:6B:A9:36 Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Certificate serial: 0AEB Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/A1D479B878D411EAA8C57711C4F9AE02.roa Signing time: Mon 02 Mar 2026 19:25:26 +0000 ROA not before: Mon 02 Mar 2026 19:25:26 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 135026 IP address blocks: 14.192.8.0/24 maxlen: 24 14.192.9.0/24 maxlen: 24 14.192.10.0/24 maxlen: 24 14.192.11.0/24 maxlen: 24 103.17.93.0/24 maxlen: 24 103.17.94.0/24 maxlen: 24 103.17.95.0/24 maxlen: 24 103.206.120.0/24 maxlen: 24 103.206.121.0/24 maxlen: 24 103.206.122.0/24 maxlen: 24 103.206.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2795 (0xaeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Validity Not Before: Mar 2 19:25:26 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a5e425-0d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:76:39:3f:d8:ae:dd:80:37:47:d8:e8:b8: 82:6a:d2:83:6d:9c:9d:a1:6a:df:5f:30:cd:7c:fd: fc:4d:4c:58:ae:a1:fd:56:db:2c:36:4f:da:d1:08: f5:b2:1e:6f:e1:4b:d1:df:6b:34:06:db:58:fd:5b: 66:b2:cd:3b:6d:f6:47:57:2c:e2:be:70:2b:5a:66: 17:12:5f:1b:57:79:37:e0:df:32:44:2d:00:c0:38: fd:fb:58:5c:13:35:33:14:ac:14:53:61:b0:02:58: a5:20:79:af:1a:29:08:95:d1:87:4a:c6:57:d6:53: ec:e9:2d:7c:b5:b1:de:95:d7:ed:78:35:07:09:2a: 20:f6:aa:d0:8b:1b:4b:a1:fe:a3:70:09:d9:06:9c: 6f:dd:15:64:d7:af:05:71:c1:c5:16:0b:92:a1:e5: d9:55:3d:bb:47:79:a3:5b:b6:28:b4:4e:53:6a:2d: e4:49:53:cc:69:e8:b9:17:b4:d3:ef:41:e3:55:11: e8:af:34:8e:f2:ab:ae:e9:f5:44:31:64:1d:3d:3e: 39:28:b0:8e:46:c2:76:fd:49:17:6c:af:f7:f4:51: 6c:9e:a5:0c:c1:62:ba:25:72:29:2d:87:10:91:77: e1:f4:bf:9c:a5:0a:d0:bf:e2:c8:2b:4f:96:51:aa: a3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7D:C1:26:D2:5D:1D:BA:54:4C:1D:37:C6:32:54:E8:48:6B:A9:36 X509v3 Authority Key Identifier: keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/A1D479B878D411EAA8C57711C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.192.8.0/22 103.17.93.0-103.17.95.255 103.206.120.0/22 Signature Algorithm: sha256WithRSAEncryption 11:72:41:b3:0f:53:81:61:3e:f2:64:b9:15:a0:d9:a4:e5:f2: f3:37:61:23:b3:06:b3:87:d8:e4:4d:e0:fa:3f:75:d0:02:65: fa:3c:b8:08:03:ce:66:75:83:53:5d:9c:12:47:1e:ea:e1:03: 7c:6f:59:0c:6e:67:71:3e:f7:56:c1:54:0e:58:3b:d3:3a:39: 8e:32:99:22:5c:b5:cf:9d:ea:0a:8e:2c:8a:6a:6c:7a:88:1a: 13:82:e8:90:bc:f7:11:ba:95:d3:50:ab:29:b9:63:c7:22:d1: be:43:27:2c:fb:e7:5e:3f:e4:6f:13:24:ea:7e:e8:4a:b6:ee: bf:ae:7c:98:40:28:3c:e2:56:d8:43:fb:ea:a1:b6:bd:5d:c3: 68:fc:1c:4f:36:98:e8:03:81:44:f7:34:ea:15:fc:17:27:b6: 81:60:ac:e2:14:79:0c:5f:9e:bb:e9:88:fe:48:03:93:7f:1e: c2:cb:15:d6:5e:6c:fd:06:8f:33:65:49:49:6e:17:bf:29:6b: 44:de:36:b1:d1:d9:65:e5:de:f4:13:d7:b3:0e:68:ce:d4:e1: a2:bd:9c:00:0e:d7:14:71:a1:dd:66:6d:83:1f:ac:da:08:ad: ca:a2:fa:40:b0:2d:23:80:98:57:c4:87:d6:7f:55:7b:8f:b3: 04:e0:7b:d3 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICCuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRDQxMTAvBgNVBAUTKDJBOTNFMTQ1OTc2NjUwNjE5NURGRkM5OUI1MjMzNjJC RTVBQzBENkIwHhcNMjYwMzAyMTkyNTI2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ZTQyNS0wZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCB2OT/Yrt2AN0fY6LiCatKDbZydoWrfXzDNfP38TUxYrqH9VtssNk/a0Qj1 sh5v4UvR32s0BttY/Vtmss07bfZHVyzivnArWmYXEl8bV3k34N8yRC0AwDj9+1hc EzUzFKwUU2GwAlilIHmvGikIldGHSsZX1lPs6S18tbHeldfteDUHCSog9qrQixtL of6jcAnZBpxv3RVk168FccHFFguSoeXZVT27R3mjW7YotE5Tai3kSVPMaei5F7TT 70HjVRHorzSO8quu6fVEMWQdPT45KLCORsJ2/UkXbK/39FFsnqUMwWK6JXIpLYcQ kXfh9L+cpQrQv+LIK0+WUaqjFQIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFJh9wSbS XR26VEwdN8YyVOhIa6k2MB8GA1UdIwQYMBaAFCqT4UWXZlBhld/8mbUjNivlrA1r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNENC8yNUEwNjE4MDZC MUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVHR1YzX3ladFNNMkstV3NE V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twUGhSWmRtVUdHVjNfeVp0U00ySy1Xc0RXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjMzRDQvMjVBMDYxODA2QjFGMTFFQTgxMzBBNjVGQzRGOUFFMDIvQTFENDc5Qjg3 OEQ0MTFFQUE4QzU3NzExQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQCDsAIMAwDBABnEV0DBAVnEUADBAJnzngwDQYJKoZIhvcNAQELBQAD ggEBABFyQbMPU4FhPvJkuRWg2aTl8vM3YSOzBrOH2ORN4Po/ddACZfo8uAgDzmZ1 g1NdnBJHHurhA3xvWQxuZ3E+91bBVA5YO9M6OY4ymSJctc+d6gqOLIpqbHqIGhOC 6JC89xG6ldNQqym5Y8ci0b5DJyz7514/5G8TJOp+6Eq27r+ufJhAKDziVthD++qh tr1dw2j8HE82mOgDgUT3NOoV/BcntoFgrOIUeQxfnrvpiP5IA5N/HsLLFdZebP0G jzNlSUluF78pa0TeNrHR2WXl3vQT17MOaM7U4aK9nAAO1xRxod1mbYMfrNoIrcqi +kCwLSOAmFfEh9Z/VXuPswTge9M= -----END CERTIFICATE-----Generated at Thu Mar 26 23:44:26 2026 by rpki-client